84 lines
1.6 KiB
Plaintext
84 lines
1.6 KiB
Plaintext
# StellaOps Logrotate Configuration
|
|
# Place in /etc/logrotate.d/stellaops
|
|
|
|
/var/log/stellaops/*/*.log {
|
|
daily
|
|
rotate 14
|
|
compress
|
|
delaycompress
|
|
missingok
|
|
notifempty
|
|
create 0640 stellaops stellaops
|
|
sharedscripts
|
|
dateext
|
|
dateformat -%Y%m%d
|
|
|
|
# Size-based rotation (rotate if larger than 100MB regardless of time)
|
|
maxsize 100M
|
|
|
|
# Minimum size before considering rotation
|
|
minsize 1M
|
|
|
|
postrotate
|
|
# Signal services to reopen log files if needed
|
|
# Most Serilog file sinks handle this automatically
|
|
/bin/true
|
|
endscript
|
|
}
|
|
|
|
# Scanner service specific (higher volume)
|
|
/var/log/stellaops/scanner/*.log {
|
|
daily
|
|
rotate 7
|
|
compress
|
|
delaycompress
|
|
missingok
|
|
notifempty
|
|
create 0640 stellaops stellaops
|
|
sharedscripts
|
|
dateext
|
|
maxsize 200M
|
|
}
|
|
|
|
# Concelier service (vulnerability processing)
|
|
/var/log/stellaops/concelier/*.log {
|
|
daily
|
|
rotate 14
|
|
compress
|
|
delaycompress
|
|
missingok
|
|
notifempty
|
|
create 0640 stellaops stellaops
|
|
sharedscripts
|
|
dateext
|
|
maxsize 150M
|
|
}
|
|
|
|
# Authority service (signing operations - keep longer for audit)
|
|
/var/log/stellaops/authority/*.log {
|
|
daily
|
|
rotate 30
|
|
compress
|
|
delaycompress
|
|
missingok
|
|
notifempty
|
|
create 0640 stellaops stellaops
|
|
sharedscripts
|
|
dateext
|
|
maxsize 50M
|
|
}
|
|
|
|
# Router/Gateway logs
|
|
/var/log/stellaops/router/*.log {
|
|
daily
|
|
rotate 7
|
|
compress
|
|
delaycompress
|
|
missingok
|
|
notifempty
|
|
create 0640 stellaops stellaops
|
|
sharedscripts
|
|
dateext
|
|
maxsize 100M
|
|
}
|